18 matches found
com.jamonapi:jamon (2.78) potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.2.3)
com.hazelcast:hazelcast-all MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - com.jamonapi:jamon 2.78 Source cves: CVE-2023-45859 Source advisory: OSV:GHSA-XH6M-7CR7-XX66...
Improper Neutralization of Input During Web Page Generation in JAMon
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
GHSA-QPR7-5M63-HQ2C Improper Neutralization of Input During Web Page Generation in JAMon
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
com.coherentlogic.fred.client:fred-client-core (0.9.3), com.coherentlogic.fred.client:fred-client-core-it (0.9.3) +25 more potentially affected by CVE-2013-6235 via com.jamonapi:jamon (>=2.0, <=2.75)
com.jamonapi:jamon MAVEN version =2.0, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.1.4, =0.9.0, =0.9.1 and more Source cves: CVE-2013-6235 Source advisory: OSV:GHSA-QPR7-5M63-HQ2Chttps://vulners.com/osvghsa/OSV:GHSA-Q...
org.springframework:spring-aop (>=1.2.1, <=1.2.4), org.springframework:spring-context (>=1.2.1, <=1.2.4) +9 more potentially affected by CVE-2013-6235 via com.jamonapi:jamon (1.0)
com.jamonapi:jamon MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jamonapi:jamon and may be impacted: - org.springframework:spring-aop =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.4...
com.coherentlogic.fred.client:fred-client-core (0.9.3), com.coherentlogic.fred.client:fred-client-core-it (0.9.3) +25 more potentially affected by CVE-2013-6235 via com.jamonapi:jamon (>=2.0, <=2.75)
com.jamonapi:jamon MAVEN version =2.0, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.1.4, =0.9.0, =0.9.1 and more Source cves: CVE-2013-6235 Source advisory: GHSA-QPR7-5M63-HQ2Chttps://vulners.com/github/GHSA-QPR7-5M63-H...
JAMon Multiple Cross-Site Scripting Vulnerabilities
JAMon is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[CVE-2013-6235] - Multiple Reflected XSS vulnerabilities in JAMon v2.7
Advisory Information Title: Multiple Reflected XSS vulnerabilities in JAMon Date published: 2013-01-23 Date of last update: 2013-01-23 Vendors contacted: JAMon v 2.7 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-6235 CVSS v2 Base Score:...
CVE-2013-6235
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
CVE-2013-6235
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
CVE-2013-6235
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
CVE-2013-6235
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
CVE-2013-6235
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
CVE-2013-6235
CVE-2013-6235 refers to multiple reflected XSS vulnerabilities in JAMon (Java Application Monitor) v2.7 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via unsanitized input in parameters such as listenertype and currentlistener (in mondetail.jsp) and ArraySQL (in mo...
PT-2014-3071
Name of the Vulnerable Software and Affected Versions JAMon versions 2.7 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the listenertype or currentlistener parameter to "mondetail.jsp" or the ArraySQL parameter to...
CVE-2013-6235: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
JAMon 2.7 Cross Site Scripting
Advisory Information Title: Multiple Reflected XSS vulnerabilities in JAMon Date published: 2013-01-23 Date of last update: 2013-01-23 Vendors contacted: JAMon v 2.7 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-6235 CVSS v2 Base Score:...